For each small image region (in space and time), a measure of perceptual transparence of each of a set of possible watermark carrier modulations is used to choose a subset of such modulations, from which a secure random number generator selects, for each image region, a single carrier, modulations of which carry the watermark data.